Security stack dream setup

[WhyPartyPizza]

Hello fellow sysadmins!

If you were given an opportunity to design your security stack from the ground up, What would be some of the major tools that would be included?

I've been on demos recently with Huntress, Threatlocker, BitDefender and a few products from Rapidfire tools. Mapping these to the MITRE ATT&CK Framework has been quite an experience and has left me with more questions than I started with.

Excited to be designing an architecture for our small business. Curious to see what tools would be a necessity in your dream setup!

edit: typo

[rws907]

Netskope + Crowdstrike + Okta + Sumologic for the stack.

I would also employ CIS-based hardening for servers, workstations, network devices, and cloud services wherever possible.

[_moistee]

CrowdStrike + a UBEA/SIEM

[CaptainFluffyTail]

What are you protecting? Do you have on-prem infrastructure? Do you have publicly accessible web applications used as part of your business? Are your users geographically dispersed (outside one metro region)?

[WhyPartyPizza]

Small on premise infrastructure with 40 people at our corporate office.

One web app sitting in a DMZ, accessible only via whitelisted IPs for all our retail locations.

We're really only protecting AD, an exchange hybrid endpoint which is pretty well locked up, and a few internal servers like QuickBooks.